Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk 1

11/01/2024, 02:43

240111-c7j7vsdaej 1

Analysis

  • max time kernel
    80s
  • max time network
    139s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/01/2024, 02:43

General

  • Target

    Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json

  • Size

    520B

  • MD5

    f7a746a03497fffcfb699a3ca0f897ce

  • SHA1

    766b2bc2acec1f1d48e68bdf05281931c8be8f62

  • SHA256

    56f0cab763e5b34bfcc2df7d77d699177d1523f3c298cad8a60ce9b59a215766

  • SHA512

    43d21561dc88f8b496a68f8a6cb5d952bcfa6805b0b90a310be3cbdd9f3f67e7bf25ecbb86c2340462a9a7b6c95a0d0d2df3c669648d8ea7094c3b63a3f6022b

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json\""
    1⤵
      PID:524
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json\""
      1⤵
        PID:524
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json\""
        1⤵
          PID:524
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json"
          1⤵
            PID:524
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json"
            1⤵
              PID:524
              • /bin/zsh
                /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json"
                2⤵
                  PID:526
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json"
                  2⤵
                    PID:526
                  • /Users/run/Design
                    /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json
                    2⤵
                      PID:526
                    • /Users/run/Design
                      /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/app_config.json
                      2⤵
                        PID:526
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.audio.systemsoundserverd
                      1⤵
                        PID:542
                      • /usr/sbin/systemsoundserverd
                        /usr/sbin/systemsoundserverd
                        1⤵
                          PID:542
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.pbs
                          1⤵
                            PID:543
                          • /System/Library/CoreServices/pbs
                            /System/Library/CoreServices/pbs
                            1⤵
                              PID:543
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.audio.AudioComponentRegistrar
                              1⤵
                                PID:544
                              • /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
                                /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
                                1⤵
                                  PID:544
                                • /usr/sbin/spctl
                                  /usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
                                  1⤵
                                    PID:567

                                  Network

                                  MITRE ATT&CK Matrix

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  • /Users/run/Library/Caches/.dat.nosync021f.6EVEdG

                                    Filesize

                                    12KB

                                    MD5

                                    3b9afc46641bef629d05880e079595e5

                                    SHA1

                                    9ea5ab44a0ef59ec2ebd890fe25e9f976051da3e

                                    SHA256

                                    ed117d79f92be794f5ba33c20557fa05d0ca6a3852fd99ee2e8869485dbdc687

                                    SHA512

                                    9525d534893213bc3f14ad9fe792a19a8f5489211a17cd9a38eb18edc6637cfe8c97041ecbc49ae40ddb6a609ced3070e913a668d3d0313f1a6b5a26ce5364d9